CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 보통4.8 |
In JetBrains TeamCity before 2023.05 open redirect during oAuth configuration was possible |
| 31/05/2023 |
| CVE-2023-34223 | 보통5.3 | In JetBrains TeamCity before 2023.05 parameters of the "password" type from build dependencies could be logged in some cases | 31/05/2023 |
| CVE-2023-34222 | 보통6.1 | In JetBrains TeamCity before 2023.05 possible XSS in the Plugin Vendor URL was possible | 31/05/2023 |
| CVE-2023-34221 | 보통5.4 | In JetBrains TeamCity before 2023.05 stored XSS in the Show Connection page was possible | 31/05/2023 |
| CVE-2023-34220 | 보통5.4 | In JetBrains TeamCity before 2023.05 stored XSS in the Commit Status Publisher window was possible | 31/05/2023 |
| CVE-2023-34219 | 보통4.3 | In JetBrains TeamCity before 2023.05 improper permission checks allowed users without appropriate permissions to edit Build Configuration settings via REST API | 31/05/2023 |
| CVE-2023-34218 | 심각9.8 | In JetBrains TeamCity before 2023.05 bypass of permission checks allowing to perform admin actions was possible | 31/05/2023 |
| CVE-2022-48428 | 보통5.4 | In JetBrains TeamCity before 2022.10.3 stored XSS on the SSH keys page was possible | 27/03/2023 |
| CVE-2022-48427 | 보통5.4 | In JetBrains TeamCity before 2022.10.3 stored XSS on “Pending changes” and “Changes” tabs was possible | 27/03/2023 |
| CVE-2022-48426 | 보통5.4 | In JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible | 27/03/2023 |
| CVE-2022-48344 | 보통6.1 | In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process. | 23/02/2023 |
| CVE-2022-48343 | 보통6.1 | In JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process. | 23/02/2023 |
| CVE-2022-48342 | 심각9.8 | In JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents. | 23/02/2023 |
| CVE-2022-46831 | 보통4.9 | In JetBrains TeamCity between 2022.10 and 2022.10.1 connecting to AWS using the "Default Credential Provider Chain" allowed TeamCity project administrators to access AWS resources normally limited to TeamCity system administrators. | 08/12/2022 |
| CVE-2022-46830 | 보통5.3 | In JetBrains TeamCity between 2022.10 and 2022.10.1 a custom STS endpoint allowed internal port scanning. | 08/12/2022 |
| CVE-2022-44646 | 보통5.3 | In JetBrains TeamCity version before 2022.10, no audit items were added upon editing a user's settings | 03/11/2022 |